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FIELD OF THE INVENTION 

The present invention generally relates to the 
copying of material and in particular, to a system, method 
and recording unit for protected copying of material. 

BACKGROUND OF THE INVENTION 

Content providers are rightfully concerned about 
illegal or inappropriate copying of copyrightable content. 
This is particularly problematic with the proliferation of 
personal computers (''PCs") with digital versatile or video 
disc (^'DVD") recordable drives or drives with other forms of 
high capacity removable and recordable media. To mitigate 
this concern, there has been some level of agreement between 
various industries that the computer industry should consider 
adding copy control technologies at various points in PCs. 
In particular, the possibility has been discussed of 
including video watermark detection in DVD drives. 

Copy control has at least two distinct 
functionalities that might be found desirable. The first, 
and probably most obvious, would be to prevent any copying of 
copyrightable content onto recordable DVD media. This form 
of copy control is probably most desirable for video content 
distributed on packaged media, such as DVD-Video as stored on 



read-only memory (DVD-ROM) , or perhaps pay-per- video video 
distribution via cable or satellite distribution systems. 

In some cases, such as subscription television or 
television services where individual channels are paid for, 
there is generally a right, or at least an expectation, that 
time shifting of program material is allowed. This creates a 
need for a second type of copy control functionality that 
allows one copy of program material to be made while 
preventing additional copies from being made from that copy. 
This is often referred to as ''copy-once" functionality. In a 
copy-once capable system, video content or material must 
first be designated as being copy-once. However, once that 
first copy has been made, the video from that copy must have 
a new state, a ''no-more-copies " or "copy-no-more" state. It 
is also possible that copy-once functionality could be used 
as part of a system for electronic distribution of video 
content in lieu of packaged media. 

Copy-once functionality provides a number of 
complications to a watermarking based copy control system. 
Providing the ability to transition content from the "copy- 
once" state to the "copy-no-more" state may add cost to 
either the core watermark detection circuitry or to devices 
implementing the watermarking as part of a system. In some 
cases, PC hardware manufacturers may not want to support the 
copy-once functionality, but with some system designs may 
have limited options to acquire components that do not 
include its cost. 

OBJECTS AND SUMMARY OF THE INVENTION 

Accordingly, it is an object of the present 
invention to provide a system, method and recording -unit for 



providing protected copying of material that minimize the 
component cost of such protection. 

Another object is to provide a system, method and 
recording unit for providing protected copying of material 
that minimize the cost to consumers that do not desire or 
need copy-once functionality. 

Still another object is to provide a system, method 
and recording unit for providing protected copying of 
material that provides correct results even when interacting 
with non-compliant devices. 

Yet another object is to provide a system, method 
and recording unit for providing protected copying of 
material that provides correct results even in the event of 
certain detector failures. 

These and additional objects are accomplished by 
the various aspects of the present invention, wherein briefly 
stated, one aspect is a system for providing protected 
copying of material, comprising: a preprocessing unit having 
an output and capable of providing copy-once functionality on 
a material before providing the material on the output; and a 
recording unit coupled to the preprocessing unit output, and 
capable of searching for a copy-never indication in the 
material provided on the preprocessing unit output and 
copying the material unless the copy-never indication is 
found, but lacking capability to remark the material with a 
copy-no-more indication . 

Another aspect is a method implemented in a 
recording unit for providing protected copying of material, 
comprising: detecting if a copy-never or copy-once indication 
is provided with a material; if the copy-never indication is 
detected, then not allowing copying of the material; if 
neither the copy-never nor the copy-once indication is 



detected, then allowing copying of the material; and if the 
copy-once indication is detected, then transmitting 
information of its detection back to a sender of the material 
provided a secure channel is established with the sender, 
otherwise not allowing copying of the material. 

Another aspect is a recording unit for providing 
protected copying of material. The recording unit includes 
an input channel, primary detector and compliance logic. The 
input channel receives a material for copying. The primary 
detector detects if a copy-never indication and a copy-once 
indication are provided with the material. The compliance 
logic is configured such that if the copy-never indication is 
detected, then it prevents the material from being copied; if 
neither the copy-never nor the copy-once indication is 
detected, then it allows the material to be copied. 

Still another aspect is another system for 
providing protected copying of material. The system includes 
a preprocessing unit and a recording unit coupled to the 
preprocessing unit. 

The preprocessing unit has at least one input 
channel for receiving material and an output channel for 
providing an output. The material is provided as the 
preprocessing unit's output if neither a copy-never 
indication nor a copy-once indication is detected as being 
provided with the material. The material is not provided as 
the preprocessing unit's output if either the copy-never 
indication is detected as being provided or the copy-once 
indication and a copy-no-more indication are both detected as 
being provided with the material. An encrypted version of 
the material including the copy-no-more indication is 
provided as the pre-processing unit's output and the output 
channel is configured to be a secure channel if the copy-once 



indication is detected and the copy-no-more indication is not 
detected prior to the inclusion with the material. 

The recording unit includes a primary detector and 
compliance logic. The primary detector detects if a copy- 
never indication and a copy-once indication are provided with 
the preprocessing unit's output. The compliance logic is 
configured such that if the copy-never indication is 
detected, then it does not allow the preprocessing unit's 
output to be recorded, and if neither the copy-never nor the 
copy-once indication is detected, then it allows the 
preprocessing unit's output to be copied. 

Additional objects, features and advantages of the 
various aspects of the present invention will become apparent 
from the following description of its preferred embodiments, 
which description should be taken in conjunction with the 
accompanying drawings . 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 illustrates, as an example, a block diagram 
of a system implemented in a personal computer for providing 
protected copying of material, utilizing aspects of the 
present invention. 

FIG. 2 illustrates, as an example, a block diagram 
of a system iiriplemented in a non-compliant personal computer 
including a recording unit for providing protected copying of 
material, utilizing aspects of the present invention. 

FIG. 3 illustrates, as an example, a truth table 
for compliance logic implemented in a preprocessing unit for 
providing protected copying of material, utilizing aspects of 
the present invention. 



FIG. 4 illustrates, as an example, a truth table 
for compliance logic implemented in a recording unit for 
providing protected copying of material, utilizing aspects of 
the present invention. 

FIG. 5 illustrates, as an example, a truth table 
for alternative compliance logic implemented in a recording 
unit for providing protected copying of material, utilizing 
aspects of the present invention. 

FIG. 6 illustrates, as an example, a flow chart of 
a method implemented in a preprocessing unit for providing 
protected copying of material, utilizing aspects of the 
present invention. 

FIG. 7 illustrates, as an example, a flow chart of 
a method implemented in a recording unit for providing 
protected copying of material, utilizing aspects of the 
present invention. 

FIG. 8 illustrates, as an example, a flow chart of 
an alternative method implemented in a recording unit for 
providing protected copying of material, utilizing aspects of 
the present invention. 

FIG. 9 illustrates, as an example, a flow chart of 
a method implemented in a preprocessing unit for providing 
back-up detection of primary watermark detection, utilizing 
aspects of the present invention. 

FIG. 10 illustrates, as an example, a block diagram 
of an alternative system implemented in a personal computer 
for providing protected copying of material, utilizing 
aspects of the present invention. 

FIG. 11 illustrates, as an example, a truth table 
for compliance logic implemented in a recording unit 
including both primary and secondary detectors for providing 



protected copying of material, utilizing aspects of the 
present invention. 

PIG. 12 illustrates, as an example, a truth table 
for alternative compliance logic implemented in a recording 
unit including both primary and secondary detectors for 
providing protected copying of material, utilizing aspects of 
the present invention. 

FIG. 13 illustrates, as an example, a flow chart of 
a method implemented in a recording unit including both 
primary and secondary detectors for providing protected 
copying of material, utilizing aspects of the present 
invention. 

FIG. 14 illustrates, as an example, a flow chart of 
an alternative method implemented in a recording unit 
including both primary and secondary detectors for providing 
protected copying of material, utilizing aspects of the 
present invention. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

As used herein: the terms ''audio -visual content" or 
''A/V content" includes audio, visual and other multimedia 
content including motion pictures, music, the spoken word, 
photos, and printed text; "material" and ''content" may be 
used interchangeably, and includes A/V and other distributed 
content including computer programs or software; and 
"proprietary material" means material protected by contract 
or intellectual property law. 

FIG. 1 illustrates, as an example, a block diagram 
of a system for providing protected copying of material that 
is implemented in a personal computer 100. The system 
includes a preprocessing unit 110 and a recording unit 120 
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that provide protected copying of material in such a manner 
that minimizes the component cost of such protection, 
minimizes the cost to consinners that do not desire or need 
copy-once functionality, provides correct results even when 
5 interacting with non-compliant devices, and provides correct 
results even in the event of certain detector failures. The 
preprocessing unit 110 is preferably configured on an 
expansion board to the PC such as a video capture board or a 
network board such as a Firewire/5C-IEEE-1394 board. The 
10 recording unit 120 is preferably a drive installed in or 
otherwise coupled to the PC that is designed for recording 
material on recordable media such as, for examples, a DVD 
H recordable drive, CD recordable drive, or flash memory or 
p other solid-state memory recordable unit. Commonly, such 
^15 recordable media may be both high capacity and removable, but 
fl need not necessarily be so to practice the present invention. 

fli A key feature of this system is that it does not 

J^.^ include a secondary detector or a remarker in the recording 

p unit 120. In particular, copy-once functionality is 

HI 

lf|20 performed outside of the recording unit 120 in this system. 

Thxs has the advantage of reducing the cost of the recording 



unit 120, which is important since any cost added to the 
recording unit 120 will have to be borne by all consumers of 
PC's having such recording units installed, whether they 

25 desire to record (i.e., copy) copy-once material or not. For 
example, if the consximer is only using the PC's recording 
unit to store PC application data, copy-once functionality 
provides only limited value to that consumer. A primary 
detector 122 is included in the recording unit 120, however, 

30 since, among other reasons, detection in the recording unit 
120 of a copy-never indication in material to be copied has 
been a strongly stated requirement by content provider 



companies as a mechanism to prevent inappropriate copying of 
their material. 

In this system, copy-once functionality is 
performed in the preprocessing unit 110. This '^outside-the- 
recording-unit" configuration is well understood from prior 
art. For example, the Copy Protection System Architecture 
C'CPSA") described by IBM, Intel, Matsushita and Toshiba is 
one possible architecture utilizing watermarking, analog or 
digital inputs and encryption on recordable media. 

Since the preprocessing unit 110 preferably resides 
in an optional expansion board installed in the PC, 
relocating the secondary detector and remarker used for copy- 
once functionality to the preprocessing unit 110 thus sets up 
a situation where only consumers that desire the copy-once 
functionality have to pay for it. In this case, there would 
be commercially available compliant expansion boards 
including copy-once functionality, and non-compliant 
expansion boards that do not include the copy-once 
functionality. If the only material that a particular 
consumer ever wanted to capture were not proprietary 
material, then a standard non-compliant expansion board would 
be fine for that consiimer. Thus, such a consumer is saved 
from the expense of purchasing the more expensive compliant 
expansion board with the added copy-once functionality. 

As will be discussed in more detail in the 
following, another key feature of this system is the addition 
of certain added logic in the preprocessing unit 110 and 
recording unit 120 that compensates for a failure of the 
preprocessing unit 110 to properly detect a copy-once 
indication in received material. In particular, in those 
situations where the preprocessing unit 110 fails to detect a 
copy-once indication, but the recording unit 120 does, then 
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the recording unit 120 sends information of such detection 
back to the preprocessing unit 110 provided a secure channel 
is established between the preprocessing unit 110 and the 
recording unit 120. 

Such a situation could arise, because of the 
statistical nature of detectors in the preprocessing unit 110 
and the recording unit 120, and in particular, the 
variability of performance of their primary detectors 
operating in different domains (e.g., baseband and MPEG) 
and/or the variability of their detectors resulting from 
different optimizations for different environments (e.g., in 
the recording unit 120 versus in the preprocessing unit 110) . 

The preprocessing tinit 110 then treats the received 
information of the recording unit's detection of the copy- 
once indication as though the preprocessing unit 110 had 
itself detected the copy-once indication, thereby 
compensating for its previous failure to do so. Addition of 
this feature in the system avoids the unfortunate consequence 
of otherwise preventing a consinner from making a copy of the 
material that he or she might otherwise be allowed to make. 

Referring back to FIG. 1 now, the preprocessing 
unit 110 receives an incoming stream of material from one of 
several possible of its input channels depending upon the 
format of the incoming stream. For example, if the incoming 
stream represents analog data, then the preprocessing unit 
110 positions its switch 113 to receive the output of analog- 
to-digital (^^A/D") and MPEG converter 111. On the other 
hand, if the incoming stream of material is from a 1394 link 
layer device such as copy-free (^^CF") material from a 
camcorder, then the preprocessing unit 110 positions its 
switch 113 to receive that incoming stream. As another 
exairple, if the incoming stream of material is from a 1394 
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link layer device with 5C copy protection, then the 
preprocessing unit 110 positions its switch 113 to receive 
the output of 5C decrypter 112 . 

A primary detector 115 examines or searches the 
incoming stream of material for either a copy-never C'CN") 
indication or a copy-once (''CO") indication provided with the 
material. At the same time, a secondary detector 116 
examines or searches the incoming stream of material for a 
copy-no-more C'CNM") or related secondary indication provided 
with the material. 

Preferably, the copy-never indication comprises a 
copy-never watermark embedded in the material that indicates 
that the material should not be copied under any 
circumstances. The copy-once indication preferably comprises 
a copy-once watermark embedded in the material that indicates 
that the material may be copied only once. The copy-no-more 
indication preferably comprises a copy-no-more watermark 
embedded in the material that indicates that the material has 
already been copied once and is to be copied no more. 
Alternatively, where a related secondary indication is 
provided with the material instead of a copy-no-more 
indication, the related secondary indication preferably 
comprises a secondary watermark that was previously embedded 
in the material by a remarker such as remarker 114. The 
copy-no-more indication is deduced in this case by compliance 
logic 118 after receiving a copy-once watermark detected by 
the primary detector 115 and the secondary watermark detected 
by the secondary detector 116 . 

If the CN watermark is detected or found in the 
incoming stream of material by the primary detector 115, then 
information of such detection is passed to compliance logic 
118 which causes A-B-C switch 119 to be set to position A so 
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that the incoming stream of material is not passed to the 
recording unit 120 and therefore, is not recorded or copied. 
Likewise, if the CO watermark is detected or found in the 
incoming stream of material by the primary detector 115 and 
the CNM watermark is detected or found in the incoming stream 
of material by the secondary detector 116, then information 
of such detections are passed to the compliance logic 118 
which causes the A-B-C switch 119 to again be set to position 
A so that the incoming stream of material is not passed to 
the recording unit 120 and therefore, is not recorded or 
copied. If neither the CN or CO watermarks are detected or 
found by the primary detector 115, nor the CNM watermark 
detected or found by the secondary detector 116, then 
information of such lack of detection is passed to the 
compliance logic 118 which causes the A-B-C switch 119 to be 
set to position B so that the incoming stream of ''copy-free" 
C'CF") material is passed to the recording unit 120 and 
therefore, is allowed to be freely recorded or copied. 

On the other hand, if the CO watermark is detected 
or found in the incoming stream of material by the primary 
detector 115 and the CNM watermark is not detected or found 
by the secondary detector 116, then information of such is 
passed to the compliance logic 118 which thereupon causes the 
A-B-C switch 119 to be set to position C. A remarker 114 
then remarks the incoming CO watermarked stream of material 
to include a CNM watermark. 

A CPRM Tinit 117 in the preprocessing unit 110 
establishes a CPRM-encrypted/ secure channel with an AKE unit 
124 in the recording unit 120 through an authentication and 
key exchange (^'AKE") protocol such as Dif f ie-Hellman. This 
secure channel guarantees through the use of secrets known to 
compliant devices (i.e., the expansion board including the 
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preprocessing unit 110 and the recordable drive including the 
recording unit 120) that other devices that might intercept 
the stream of material at an intermediate location are unable 
to recover the original, unencrypted content. The secure 
channel can also help maintain a chain of license 
requirements. For example, the 5C/1394 link layer is also an 
encrypted/ secure channel. Therefore, the source device at 
the other end of that channel doesn't release content to the 
PC unless the PC knows the 5C decryption secrets. Likewise, 
the CPRM unit 117 won't release content to the recording unit 
120 unless the AKE unit 124 proves its ability to comply with 
established rules by successfully completing the AKE process 
and proving that it knows the correct secrets. After 
transmission is completed, the secure channel is disabled. 

If the recording unit 120 is receiving material 
from a compliant expansion board, then its primary detector 
122 should not detect a CN or CO watermark in received 
material since the only two types of material that it should 
be receiving is CF material over the normal, non-secure 
channel resulting from the switch A-B-C 119 in the 
preprocessing unit 110 being in the B position, or remarked 
material over the encrypted/ secure channel resulting from the 
switch A-B-C 119 being in the C position. 

Therefore, if the primary detector 122 does detect 
a CN or CO watermark in received material, then either the 
expansion board providing the material is (i) a non-compliant 
expansion board, or (ii) a compliant expansion board whose 
primary detector has failed for some reason to detect the CN 
or CO watermark in the material. To determine which 
situation exists, upon detection of a CN or CO watermark by 
the primary detector 122, the AKE unit 124 attempts to 
establish a secure channel with the sender of the material. 
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If the AKE unit 124 is able to establish the secure 
channel, then the sender of the received material must have 
been a compliant expansion board whose primary detector has 
failed for some reason to detect the CN or CO wateinnark in 
the material since only a compliant expansion board would be 
capable of establishing the secure channel with the AKE unit 
124. In this case, instead of the primary detector 122 in 
the recording unit 120 controlling the switch D-E 125 through 
compliance logic 123 in the recording unit 120 when it 
detects a CN or CO watermark in received material, it passes 
information of such detection back to the primary detector 
115 in the preprocessing unit 110 through the secure channel. 
The primary detector 115 in the preprocessing unit 110 then 
uses the combination of the information of the recording 
unit's primary detector 122 and the preprocessing unit's 
primary detector 115 to make a decision. Based on the 
decision made, the compliance logic 118 controls the switch 
A-B-C 119 in the preprocessing unit 110 as appropriate. 

On the other hand, if it is unable to establish the 
secure channel, then the sender of the received material must 
have been a non-compliant expansion board that has no 
capability to detect the CN or CO watermark in the material. 
An example of this situation is shown in FIG. 2. In this 
case, the AKE unit 124 knows that a secure channel hasn't 
been established so the CN or CO watermark detection 
information is transmitted to the compliance logic 123 in the 
recording unit 120. The compliance logic 123 then controls 
switch D-E 125 in the recording wait 120 to allow copying of 
the received material if no CN or CO watermark is detected, 
and disallow copying of the received material if either a CN 
or CO watermark is detected. 
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FIG. 3 illustrates, as an example, a truth table 
for the compliance logic 118 implemented in the preprocessing 
unit 110. If a CN watermark is detected (indicated by a ^^1" 
in the figure) , then the CO and CNM watermarks would not be 
expected to be present in the material. In any event, 
however, if the CN watermark is detected, then it doesn't 
matter whether either of the CO or CISIM watermark is present 
or whether a secure channel can be established (indicated by 
'"X's" in the figure). The compliance logic 118 in this 
situation causes the switch A-B-C 119 to be placed in the A 
position so that no material is transmitted to the recording 
unit 120 for copying. 

If the CN watermark is not detected (indicated by a 
"0" in the figure), but the CNM watermark is, then the CO 
watermark would also be expected to be present in the 
material. In any event, however, if the CNM watermark is 
detected, then it doesn't matter whether the CO watermark is 
present or whether a secure channel can be established. The 
compliance logic 118 in this situation also causes the switch 
A-B-C 119 to be placed in the A position so that no material 
is transmitted to the recording unit 120 for copying. 

In the simple case of no watermarks being detected, 
then the compliance logic 118 in this situation causes the 
switch A-B-C 119 to be placed in the B position so that the 
material is freely transmitted to the recording unit 120 for 
copying . 

If neither the CN or CNM watermarks are detected, 
but the CO watermark is, then the compliance logic 118 causes 
the CPRM unit 117 to try to establish a secure channel with 
the recording unit 120. If a secure channel (^'SC") can be 
established (indicated by a ^^1" in the figure), then the 
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compliance logic 118 causes the switch A-B-C 119 to be placed 
in the C position so that the material can be transmitted 
after being remarked with the CNM watermark by the remarker 
114 over the encrypted/ secure channel established by the CPRM 
5 unit 117 to the recording unit 120 for copying. After the 
material has been thus transmitted, the encrypted/ secure 
channel is disabled. On the other hand, if the secure 
channel cannot be established (indicated by a ''0" in the 
figure) , then the compliance logic 118 causes the switch A-B- 
10 C 119 to be placed in the A position so that no material is ' 
transmitted to the recording unit 120 for recording or 
copying . 

Jrf FIG. 4 illustrates, as an example, a truth table 

for compliance logic 123 implemented in the recording unit 
jj|15 120. Starting with the simple case where no watermarks are 
^ detected, the compliance logic 123 in this situation causes 
n the switch D-E 125 to be placed in the E position so that the 

material can be recorded or copied. One example where no 
III watermark would be detected is where the incoming stream of 
^^20 material is from a 1394 link layer device such as copy-free 
(^'CF") material from a camcorder. Another example where no 
watermark would be detected is where the incoming stream of 
material is copy-once material that has been processed by a 
compliant PC through a pre-processing unit such as pre- 
25 processing unit 110. In this case, the remarker 114 of the 
pre-processing unit 110 has remarked the copy-once material 
with a copy-no-more or related secondary watermark, and the 
CPEM unit 117 of the pre-processing unit 110 has encrypted 
the material, thereby making any embedded watermarks 
30 undetectable to the primary detector 122 of the recording 
unit 120. The CPRM unit 117 has also established a secure 
channel with the recording unit 120 through a conventional 
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AKE process, and transmitted the encrypted material over the 
secure channel to the recording unit 120. In both of these 
cases, the recording unit 120 is allowed to record or copy 
the material . 

On the other hand, if either a CN or CO watermark 
is detected, then the compliance logic 123 causes the AKE 
unit 124 to try to establish a secure channel with the 
preprocessing unit 110. If a secure channel C'SC") is 
established, then the compliance logic 123 causes information 
of the CN or CO watermark detection to be passed back to the 
recording unit 110, and leaves switch D-E 125 alone for the 
time being. The preprocessing unit 110 then uses that 
information as though it had detected the same watermark as 
the recording unit 120. On the other hand, if the secure 
channel cannot be established, then the compliance logic 123 
causes the switch D-E 125 to be placed in the D position so 
that the material cannot be recorded or copied. 

One example where either a CN or CO watermark would 
be detected is where a compliant PC coupled to the recording 
unit 120 and including a pre-processing unit such as pre- 
processing unit 110, has failed to detect the primary 
watermark for some reason. In this case, a secure channel is 
established and compliance logic 118 of the pre-processing 
unit 110 uses the CN or CO watermark information being passed 
back to it by the recording unit 120 as though its primary 
detector 115 had detected the watermark. In the case of a CN 
watermark detection, the compliance logic 118 causes the 
switch A-B-C 119 to be placed in the A position so that no 
material is passed to the recording unit 120, and 
consequently, no material may be copied. In the case of a CO 
watermark detection, if a copy-no-more or related secondary 
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indication is not detected by the secondary detector 116, 
then the compliance logic 118 causes the remarker 114 and the 
CPRM unit 117 to process the material, and causes the switch 
A-B~C 119 to be placed in the C position so that the 
encrypted material is passed to the recording unit 120 over 
the secure channel. After the encrypted material has been 
thus passed, the secure channel is disabled. In this case, 
the primary detector 122 of the recording unit does not 
detect the CO watermark, because of the encryption, and the 
compliance logic 123 in the recording unit 120 causes the 
switch D-E 125 to be placed in the E position so that the 
material is allowed to be recorded or copied. 

Another example where either a CN or CO watermark 
would be detected is where a non- compliant PC such as the 
personal computer 200 in FIG. 2 has inappropriately passed 
material to the recording unit 120 for recording or copying, 
such as, for example, in the case of Content Scrambling 
System (^^CSS") encrypted material that has inappropriately 
been descrambled using a DeCSS module such as DeCSS unit 201. 
In this case, since a secure channel is not established with 
the non-compliant PC 200, the compliance logic 123 in the 
recording unit 120 appropriately causes the switch D-E 125 to 
be placed in the D position so that the descrambled material 
is not allowed to be recorded or copied. 

FIG. 5 illustrates, as an example, a truth table 
for alternative compliance logic 123' that may be implemented 
in the recording unit 120. In this implementation, 
information of a CN watermark detection is not transmitted 
back to the preprocessing unit 110. Only information of a CO 
watermark detection is transmitted back to the preprocessing 
unit 110. Accordingly, when the CN watermark is detected in 
this implementation, the compliance logic 123' causes the 
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switch D-E 125 to be placed in the D position so that the 
material cannot be recorded or copied. If the CO watermark 
is detected, however, then the compliance logic 123' causes 
the AKE unit 124 to try to establish a secure channel with 
the preprocessing unit 110. If a secure channel ("SC") is 
established, then the compliance logic 123' causes 
information of the CO watermark detection to be passed back 
to the recording unit 110, and leaves switch D-E 125 alone 
for the time being. The preprocessing unit 110 then uses 
that information as though it had detected the same watermark 
as the recording unit 120. On the other hand, if the secure 
channel is not established, then the compliance logic 123' 
causes the switch D-E 125 to be placed in the D position so 
that the material cannot be recorded or copied. 

Although the system including the preprocessing 
unit 110 and the recording unit 120 is described as being 
incorporated into a personal computer 100, it is to be 
appreciated that such a system could also be employed in many 
other useful configurations. For example, the preprocessing 
unit 110 may be incorporated into a set-top box with the 
recording unit 120 integrated into the set-top box or a 
stand-alone unit coupled to the set- top box. As another 
example, the preprocessing unit 110 may be incorporated into 
a network appliance with the recording unit 120 integrated 
into the network appliance or a stand-alone unit coupled to 
the network appliance. 

Also, it is to be appreciated that while video 
watermarks are focused on in this and other examples, there 
is nothing that prevents all that is described herein from 
applying to audio watermarks as well. 
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In addition, while the encryption referenced herein 
is generally labeled as CPRM-encryption, the watermarking 
technology could be bundled with any nuinber of other 
encryption technologies that are available. The critical 
5 features of the encryption system associated with the 

watermark remarker are that it: (i) '"wraps" the watermarked 
content such that it isn't discernable by the primary 
detector 122 in the recording unit 120, and (ii) is capable 
of performing an authentication and key exchange process in 
10 order to establish a secure channel between the preprocessing 
unit 110 and the recording unit 120. Note that this secure 
channel is not unlike the secure channel that is established 
in a CSS-compliant system between a DVD-ROM drive and an 
associated MPEG decoder board in order to allow playback of 
H15 DVD-Video discs. 



Also, it is to be appreciated that while the notion 
of a PC expansion board is generally used in this description 
to identify the location of the preprocessing unit's remarker 
114, CPRM- encrypt ion unit 117, and primary and secondary 
;j-|20 detectors, 115 and 116, it very well could be that these 
£j fiinctions are performed in PC software or a hybrid 

software/hardware set. In the case of software or hybrid 
software/hardware, there may be additional requirements to 
add tamper-resistance, tamper-proofing or tamper-detection in 
25 actual implementations. Additionally, although switches are 
described for controlling the passing of material through and 
from the preprocessing unit 110 and recording unit 120, in 
practice, such switching functions may be implemented in 
software, hardware or a combination of the two. Also, as is 
30 well known, logic such as compliance logic 118 and 123 may 
also be implemented in various ways including a processor, a 
state machine, stand-alone logic or circuits, or a 
combination of these and/or other conventionally known items. 



Further, although the recording units and various 
methods for providing protect material are described herein 
as attempting to establish a secure channel with a sender of 
material after detection of a CO watermark in that material, 
it may be useful in certain applications to pre-establish the 
secure channel with the sender prior to such detection. 
Accordingly, the scope of the present invention is generally 
not to be limited by the order in which watermark detection 
and secure channel establishment are performed. 

FIG. 6 illustrates, as an example, a flow chart of 
a method implemented in the preprocessing unit 110 for 
providing protected copying of material. In 601, the 
preprocessing unit 110 receives an incoming stream of 
material. In 602, the preprocessing \init 110 determines 
whether the material is encrypted. If it is, then in 603, it 
decrypts the material. In 604, 605 and 606, the 
preprocessing unit 110 respectively detects whether a copy- 
never indication, a copy-no-more indication and a copy-once 
indication are provided with the material. Although shown as 
occurring sequentially, in practice there is no necessary 
order to such detections and preferably such detections are 
performed at substantially the same time. 

If the copy-never indication is detected in 604, 
then jumping to 607, the preprocessing unit 110 does not 
allow copying of the material. It effectively does this by 
not transmitting the material to the recording unit 120. 
Likewise, if the copy-no-more indication is detected in 605, 
then the preprocessing \init 110 again jumps to 607, and does 
not allow copying of the material. If a copy-once indication 
is not detected in 606 as well as the copy-never and copy-no- 
more indications not being detected, then the preprocessing 
unit 110 does allow copying of the material. It effectively 
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does this in 610 by transmitting the material to the 
recording unit 120. 

On the other hand, if a copy-once indication is 
detected in 606, then in 608, the preprocessing unit 110 
tries to establish a secure channel with the recording unit 
120. If it is unable to establish the secure channel, then 
it jumps to 607, and does not allow copying of the material. 
If it is able to establish the secure channel, then in 609, 
the preprocessing unit 110 remarks the received material with 
a copy-no-more indication, encrypts the remarked material, 
and transmits it to the recording unit 120 via the 
encrypted/ secure channel that it has established. After 
transmission of the material, the encrypted/ secure channel is 
disabled. 

FIG. 7 illustrates, as an example, a flow chart of 
a method implemented in the recording unit 120 for providing 
protected copying of material that corresponds to the truth 
table described in reference to FIG. 4. In 701, the 
recording unit 120 receives a stream of material from the 
preprocessing unit 110 or other sender of the material. In 
702 and 703, the recording unit 120 respectively detects 
whether a copy-never indication and a copy-once indication 
are provided with the material. Although shown as occurring 
sequentially, in practice there is no necessary order to such 
detections and preferably such detections are performed at 
substantially the same time. 

If neither the copy-never indication nor the copy- 
once indication is detected, then in 704, the recording unit 
120 allows the received material to be recorded. On the 
other hand, if either the copy-never indication or the copy- 
once indication is detected, then in 705, the recording unit 



120 tries to establish a secure channel with the 
preprocessing unit 110 or other sender of the material. In 
706, if the secure channel is established, then in 708, the 
recording unit 120 transmits information of the detected 
indication back to the preprocessing unit 110 or other sender 
of the material. On the other hand, if the secure channel is 
not established, the in 707, the recording unit 120 does not 
allow recording or copying of the received material. 

FIG. 8 illustrates, as an example, a flow chart of 
an alternative method that may be implemented in the 
recording unit 120 that corresponds to the truth table 
described in reference to FIG. 5. In 801, the recording unit 
120 receives a stream of material from the preprocessing unit 
110 or other sender of the material. In 802, if a copy-never 
indication is detected in the received material, then in 807, 
the recording unit 120 does not allow recording or copying of 
the received material. In 803, if neither the copy-never 
indication nor the copy-once indication is detected in the 
received material, then in 804, the recording unit 120 allows 
the received material to be recorded. 

If the copy-once indication is detected, however, 
then in 805, the recording unit 120 tries to establish a 
secure channel with the preprocessing unit 110 or other 
sender of the material. In 806, if the secure channel is 
established, then in 808, the recording unit 120 transmits 
information of the detected indication back to the 
preprocessing unit 110 or other sender of the material. If 
the secure channel is not established, then the recording 
unit 120 jumps back to 807 so that the recording unit 120 
does not allow recording or copying of the received material. 



- 24 - 



FIG. 9 illustrates, as an example, a flow chart of 
a method implemented in the preprocessing unit 110 for 
providing back-up detection of primary watermark detection 
that corresponds to the truth table of FXG« 3 and the 
5 corresponding methods described in reference to FIGS. 6 and 
7. In 901, the preprocessing unit 110 receives a secure 
channel request from the recording unit 120. Such a request 
may occur at any time during transmission of material from 
the preprocessing unit 110 to the recording unit 120 under 
10 610 of FIG. 6. In 902, the preprocessing unit 110 cooperates 
to establish the secure channel with the recording Tinit 120, 

O and in 903^ receives information of a copy-never or copy-once 

O 

detection from the recording unit 120. If information of a 
copy-never indication is received, then in 904, the 
Mis preprocessing unit 110 jumps back to 607 of FIG. 6, and stops 
transmitting the material to the recording unit 120. On the 
other hand, if information of a copy-once indication is 
received, then the preprocessing \init 110 jumps back to 609 
of FIG. 6 to perform its copy-once functionality. 



m 



20 The flow chart of FIG. 9 may be modified to 

illustrate an alternative method that may be implemented in 
the preprocessing unit 110 for providing back-up detection of 
primary watermark detection that corresponds to the truth 
table of FIG. 4 and the corresponding methods described in 

25 reference to FIGS. 6 and 8. In that case, 904 would simply 
be removed since information of the copy-never indication is 
not sent back from the recording unit 120 to the 
preprocessing unit 110. The remaining parts of the flow 
chart would then operate in the same manner as described in 

30 reference to FIG. 9. 
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PIG. 10 illustrates, as an example, a block diagram 
of an alternative system implemented in a personal computer 
1000 for providing protected copying of proprietary material. 
While the system described in reference to FIG. 1 only shows 
5 the primary detector in the recording unit, there may be 
situations where there are advantages and no particular 
disadvantages to having both the secondary and the primary 
detectors in the recording unit. In particular, if the 
secondary mark can be detected at minimal additional cost, 
10 even though the remarker may add additional cost, then adding 
a secondary detector to the recording unit may provide 
advantage. In some situations where a primary wateiimark has 
been weakened by various processing, then the secondary mark 
may be able to take over for the primary mark and thus there 
^15 may be advantages from a system standpoint in perfoiming both 
primary and secondary detection in the recording unit. 

Accordingly, the alternative system includes the 
preprocessing unit 110 and a modified recording unit 1020. 
In this system, a secondary detector 1024 has been added to 
20 the recording unit 1020 to detect a copy-no-more indication 
included in material received by the recording unit 1020 for 
recording or copying. A primary detector 1022, AKE unit 
1025, switch D-E 1026, and compliance logic 1023 are also 
included in the recording unit 1020. The primary detector 
25 1022, AKE unit 1025, switch D-E 1026 operate substantially in 
the same manner as their counterparts in the recording unit 
120 of FIG. 1. The compliance logic 1023 is a modified 
version of the compliance logic 123 of the recording unit 120 
in FIG. 1, which accommodates the addition of the secondary 
30 detector 1024, 

FIG. 11 illustrates, as an example, a truth table 
for the compliance logic 1023 as implemented in the recording 
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unit 1020. Starting with the simple case where no watermarks 
are detected, the compliance logic 1023 in this situation 
causes the switch D-E 1026 to be placed in the E position so 
that the material can be recorded or copied. If either a CN, 
5 CNM or CO watermark is detected, however, then the compliance 
logic 1023 causes the AKE unit 1025 to try to establish a 
secure channel with the preprocessing unit 110. If a secure 
channel C'SC") is established, then the compliance logic 1023 
causes information of the watermark detection to be passed 
10 back to the recording unit 110, and leaves switch D-E 125 
alone for the time being. The preprocessing unit 110 then 
uses the watermark information as though it had detected the 
same watermark (s) as the recording unit 1020. On the other 
hand, if the secure channel cannot be established, then the 
|!15 compliance logic 1023 causes the switch D-E 1026 to be placed 
in the D position so that the material cannot be recorded or 



8^1 copied. 



FIG. 12 illustrates, as an example, a truth table 
m for alternative compliance logic that may be implemented in 
^}2X) the recording unit 1020. In this implementation, information 
1,4, of a CN or CNM watermark detection is not transmitted back to 
the preprocessing unit 110. Only information of a CO 
watermark detection is transmitted back to the preprocessing 
unit 110. Accordingly, when the CN or CNM watermark is 
25 detected in this implementation, the compliance logic causes 
the switch D-E 1026 to be placed in the D position so that 
the material cannot be recorded or copied. If the CO 
watermark is detected, however, then the compliance logic 
causes the AKE unit 1025 to try to establish a secure channel 
30 with the preprocessing unit 110. If a secure channel C'SC") 
is established, then the compliance logic causes information 
of the CO watermark detection to be passed back to the 
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recording unit 110, and leaves switch D-E 1026 alone. The 
preprocessing unit 110 then uses that information as though 
it had detected the CO watermark that was detected instead by 
the recording unit 1020. On the other hand, if the secure 
5 channel cannot be established, then the compliance logic 

causes the switch D-E 1026 to be placed in the D position so 
that the material cannot be recorded or copied. 

PIG. 13 illustrates, as an example, a flow chart of 
a method implemented in the recording unit 1020 that includes 
10 both primary 1022 and secondary 1024 detectors for providing 
protected copying of material that corresponds to the truth 
L,: table described in reference to FIG. 11. In 1301, the 
^{ recording unit 1020 receives a stream of material from the 
M preprocessing unit 110 or other sender of the material. In 
|f|15 1302, 1303 and 1304, the recording unit 1020 respectively 
j| detects whether a copy-never indication, a copy-no-more 

indication and a copy-once indication are provided with the 
material. Although shown as occurring sequentially, in 
III practice there is no necessary order to such detections and 
;J!20 preferably such detections are performed at substantially the 
same time. 

If none of the copy-never indication, the copy-no- 
more indication and the copy-once indication are detected, 
then in 1305, the recording unit 1020 allows the received 

25 material to be recorded. On the other hand, any one of the 
copy-never indication, the copy-no-more indication or the 
copy-once indication is detected, then in 1306, the recording 
unit 1020 tries to establish a secure channel with the 
preprocessing unit 110 or other sender of the material. In 

30 1307, if the secure channel is established, then in 1309, the 
recording unit 1020 transmits information of the detected 
indication back to the preprocessing unit 110 or other sender 
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of the material, and disables the secure channel after 
completion of such transmission. On the other hand, if the 
secure channel is not established, the in 1308, the recording 
unit 1020 does not allow recording or copying of the received 
material . 

FIG. 14 illustrates, as an example, a flow chart of 
an alternative method that may be implemented in the 
recording unit 1020 that corresponds to the truth table 
described in reference to FIG. 12. In 1401, the recording 
unit 1020 receives a stream of material from the 
preprocessing unit 110 or other sender of the material. In 
1402, if a copy-never indication is detected in the received 
material, then in 1405, the recording unit 1020 does not 
allow recording or copying of the received material. 
Likewise, in 1403, if a copy-no-more indication is detected 
in the received material, then the recording unit jumps back 
to 1405 so as to also not to allow recording or copying of 
the received material. 

In 1404, if a copy-once indication is also not 
detected, then in 1406, the recording unit 1020 allows the 
received material to be recorded since it has not detected 
any of the copy-never, copy-no-more or copy-once indications 
in the received material. On the other hand, in 1404, if the 
copy-once is detected, however, then in 1407, the recording 
unit 1020 tries to establish a secure channel with the 
preprocessing unit 110 or other sender of the material. In 
1408, if the secure channel is established, then in 1409, the 
recording unit 1020 transmits information of the detected 
copy-once indication back to the preprocessing unit 110 or 
other sender of the material. If the secure channel is not 
established, then the recording unit 1020 jumps back to 1405 



so that the recording unit 1020 does not allow recording or 
copying of the received material . 

Although the various aspects of the invention have 
been described with respect to preferred embodiments, it will 
be understood that the invention is entitled to full 
protection within the full scope of the appended claims. 



